Privacy Policy
Last updated: 09/15/2026
This Privacy Policy applies to the InfoBag application and to the www.infobag.com.br website. Where the two are treated differently, the text states explicitly which one it refers to.
1. Information We Collect
We collect the following data to operate InfoBag:
Data from scanned tags (code, date, notes, and link to the silo bag).
App usage data (error logs, records, and performance metrics).
Access to the device camera solely for tag scanning (we do not store photos unless the user uploads them).
User account information: email and password (authentication via JWT). For company accounts, we may request identification (ID card, passport, or equivalent document) when necessary.
On the www.infobag.com.br website: name, email address and message voluntarily submitted through the contact form.
Also on the website: browsing data collected by audience measurement tools, such as IP address, browser and device type, pages visited, traffic source and time on page.
2. How We Store Data
Data is stored on our own servers in a MySQL database. We implement reasonable security measures such as encrypted connections (TLS) in transit and server access controls.
3. How We Use the Information
We use collected data to provide and improve the service: register and display silo bag information, enable team management, maintain notes and reports history, and diagnose errors to enhance the app.
Messages sent through the website contact form are used solely to respond to the user's request.
Website browsing data is used in aggregate form, for statistical purposes and to improve the site itself, not to individually identify visitors.
Legal bases: processing of application data and contact form data is based on performance of a contract and preliminary procedures related to it (art. 7, V, of Law No. 13.709/2018 - LGPD) and on legitimate interest (art. 7, IX). Website analytics is based on the visitor's consent (art. 7, I).
4. Data Sharing
We do not sell personal data, and we do not share silo bag records with third parties for commercial purposes.
Application data (silo bags, tags and user accounts) remains on our servers and is not sent to advertising or audience analytics platforms.
We share data with third parties only in the following situations:
Infrastructure: DigitalOcean, where our servers are hosted.
Email delivery: Brevo, used to deliver contact form messages and the application's transactional communications.
Abuse protection: Cloudflare Turnstile, which verifies that form submissions are made by a person and not by a bot.
Website audience measurement: Google, through Google Tag Manager and the tools configured within it, as described in section 5. The content of the contact form (name, email and message) is not sent to Google: it travels only to our own servers.
We may also share information where required by law or by court order. We do not currently integrate external login providers.
International transfer: some of these providers process data outside Brazil. In those cases, the transfer is carried out under art. 33 of the LGPD.
5. Cookies and Tracking Technologies
The InfoBag application does not use advertising or tracking cookies.
The www.infobag.com.br website uses Google Tag Manager, a container that loads audience measurement tools. Those tools may store cookies and identifiers in your browser to understand how the site is used: most visited pages, traffic source and performance of outreach campaigns.
The website also uses browser local storage (localStorage) to remember the visitor's chosen language. That value stays on your device and is not sent to third parties.
You can block or delete cookies at any time in your browser settings. Blocking them does not prevent you from browsing the site, but it may affect some functionality.
6. Authentication & Security
The app uses email/password registration with email verification. Sessions are handled with JWT tokens. Users must keep their passwords secure and report unauthorized access.
7. Data Subject Rights and Data Deletion
Under art. 18 of the LGPD, the data subject may request at any time:
Confirmation that processing exists, and access to their data.
Correction of incomplete, inaccurate or outdated data.
Anonymization, blocking or deletion of unnecessary or excessive data, or data processed in breach of the law.
Data portability to another service provider.
Information about the entities with which their data has been shared.
Withdrawal of consent and deletion of data processed on that basis.
Users can request deletion of their account and personal data by contacting support via email. Note: silo bag records created by the user are not automatically deleted when the account is removed because they may be tied to operations or other team members. If you need those records removed, contact support to evaluate the request.
8. Sensitive Data
We do not collect or store sensitive personal data (health, biometric data, financial account details, etc.).
9. Data Retention
We retain data while the account is active or as required by law. When an account is deleted, personal data will be deleted except for silo bag records as noted above, unless otherwise agreed.
Messages received through the contact form are kept for as long as needed to handle the request and to comply with legal obligations.
10. Controller and Contact Channel
Controller: Infobag Tecnologia Agrícola e Pecuária LTDA, located at Avenida Portugal, 1148, Conj. 2501, Goiânia - GO, Brazil.
Communication channel for data subjects: contato@infobag.com.br
This channel receives requests relating to the processing of personal data described in this policy, and serves as the point of contact for communications from the Brazilian National Data Protection Authority (ANPD).
11. Contact
To exercise rights, request deletion, or for privacy inquiries: contato@infobag.com.br
12. Changes to this Policy
We may update this Privacy Policy. Updated versions will be posted in the app and on the website; continued use after changes constitutes acceptance.